IT Security Analyst - Hybrid

TASQ Staffing Solutions; Pasig; Hybrid; PHP 240,000 - 420,000; Full time

Job summary

TASQ Staffing Solutions is seeking a Security Operations Center Level 1 Analyst in a hybrid setup. The role focuses on monitoring, initial incident triage, and remediation support to protect client information systems.

Ideal candidates have 1–2 years in IT/cybersecurity and basic networking knowledge, with entry-level certifications encouraged. The position requires cloud and on-premise observability through SIEM tools and collaborative incident handling.

Qualifications

• 1–2 years IT or cybersecurity experience preferred; fresh graduates considered with strong fundamentals.
• Basic understanding of network protocols and security concepts.
• Willingness to learn and grow in a SOC environment.

Responsibilities

• Operate SIEM tools to monitor, analyse, and respond to alerts.
• Review logs from firewalls, IDS/IPS, and endpoint protection.
• Perform initial triage of alerts to determine incident nature and potential impact.
• Follow incident response playbooks for phishing, malware, and unauthorized access.
• Escalate when required and document incidents thoroughly.
• Collaborate with internal teams and clients to coordinate response.

Skills

Networking basics

TCP/IP

Firewalls

Endpoint security

Education

Entry-level cybersecurity certifications (CompTIA Security+, CSA, or GIAC GSEC)

Tools

SIEM tools (Splunk, QRadar, AlienVault, Rapid7)

Job description

About the job IT Security Analyst - Hybrid

TASQ is looking to fill a position for a Security Operations Center Level 1 Analyst ASAP.

The pre-screening interview will take place over the phone.

About the job Security Operations Center Level 1 Analyst

Role summary

The SOC Analyst Level 1 will report in a hybrid work - either work remotely routing through the Internet or will report to the office as required.

And provide technical, administrative, and procedural support for the company's Group and its clients information security program to protect the confidentiality, integrity, and availability of information systems in accordance with the company's Groups business objectives, regulatory requirements, and strategic goals.

Specific responsibilities

• SIEM Tools: Experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, QRadar, AlienVault, Rapid7) to monitor, analyse, and respond to alerts.
• Log Analysis: Ability to review logs from various sources (firewalls, IDS/IPS, endpoint protection) to detect anomalies and potential threats.Provide first-level contact to clients by manning virtual phones to receive called-in requests
• Initial Analysis: Conduct first-level triage of alerts, determining the nature of incidents, their severity, and potential impact.
• Escalation: Understand when to escal ...
• Playbook Execution: Follow incident response playbooks and procedures for common threat scenarios like phishing, malware detection, and unauthorized access.
• Threat Awareness: Basic understanding of the latest threats, vulnerabilities, and attack methods.
• Documentation: Consistent and thorough documentation of incidents, resolutions, and actions taken.
• Collaboration: Clear communication with internal teams and external stakeholders for incident coordination.

Skillset & Qualifications:

• Technical Skills: Basic knowledge of network protocols, TCP/IP, firewalls, and endpoint security solutions.
• Ideally certified with entry-level qualifications like CompTIA Security+, Certified SOC Analyst (CSA), or GIAC Security Essentials (GSEC). Soft Skills: Strong analytical thinking, attention to detail, and effective communication, especially in high-pressure situations.

Experience Level:

• Work Background: Typically, 1-2 years of IT or cybersecurity-related experience; recent graduates with strong foundational knowledge and a willingness to learn may also be considered.

Requirements:

• Stable 10mbps Internet connectivity minimum to properly perform required tasks
• Backup connectivity same capacity to ensure continuity in the event of primary connectivity unavailability
• Everything is hosted in the cloud AND within the client/partner environment online